This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7d3eb02-19dd-38e9-a224-180db53be3e7.roa File: c7d3eb02-19dd-38e9-a224-180db53be3e7.roa (raw, json) Hash identifier: ik8V95FoIVDK+WVJGPf7rgYrYauM5a/uJapt1xOoF10= Subject key identifier: A5:B2:08:76:2A:64:E4:A2:9D:51:A4:B2:CD:CD:10:C0:DE:58:5B:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B3FEB6105BCD689ED0100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7d3eb02-19dd-38e9-a224-180db53be3e7.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 55836 IP address blocks: 23.35.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:3f:eb:61:05:bc:d6:89:ed:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=4a3caad7-f326-41de-b596-fa37216552b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:07:4c:f5:c8:e6:2c:5a:8d:1c:88:92:f5: af:65:65:2d:b8:62:fa:16:5e:6b:50:fe:54:f2:3f: d7:e5:7f:8a:e0:65:a4:39:0c:5e:88:36:fa:82:28: 8a:c6:a5:23:3a:c0:32:3f:fe:2d:9d:87:69:66:c9: aa:c3:e5:2e:53:83:37:ca:83:62:ac:6f:9b:fb:12: cc:20:5a:cc:ac:04:ff:20:26:d9:71:82:0c:40:a0: 31:a8:77:26:34:12:70:22:2a:72:e1:9d:3f:96:52: 16:92:df:0a:57:17:6a:c7:0a:bc:c7:ef:e2:d2:97: 51:25:97:36:ce:6c:fa:ec:16:4d:47:ec:7e:b7:b8: c3:7f:90:6f:d2:d4:74:58:17:43:68:15:35:03:53: 6e:18:97:a7:79:2f:5e:3f:5e:3c:a2:99:d0:0d:a7: 03:46:62:37:04:50:f8:2a:53:a4:87:24:5d:68:dc: 46:63:bc:50:35:82:a5:33:8e:51:34:c2:fa:35:78: fb:0b:85:16:46:64:e5:9b:4e:25:b8:b2:00:be:7a: 00:50:7a:af:b8:0c:cc:f9:32:75:14:5e:46:f6:67: e1:9c:0d:0a:85:01:8e:d0:36:67:4b:d8:41:c9:35: 6f:5d:74:2a:30:32:2c:51:26:d0:c8:e7:8b:47:8a: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:08:76:2A:64:E4:A2:9D:51:A4:B2:CD:CD:10:C0:DE:58:5B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7d3eb02-19dd-38e9-a224-180db53be3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e2:9b:ba:11:13:61:4f:57:35:e2:fb:17:f8:2e:6d:cc:8b: f8:4a:ee:70:7c:f0:e4:7d:ad:69:b3:c4:9b:1e:d6:c7:da:28: e3:8c:81:64:22:d4:24:24:ef:0e:5e:14:f4:ca:86:1a:fe:23: 8d:df:d2:16:90:98:8c:88:e7:5e:7a:08:85:85:73:f8:8b:f0: 86:48:d9:dc:3d:18:48:af:35:82:f4:e0:3d:80:bb:35:bd:82: 4a:66:d6:c9:f9:84:7b:83:24:75:e9:bc:b1:ca:bb:b5:a0:36: 0b:c4:73:4f:f8:33:2d:98:c8:2e:48:8c:e6:b4:ea:9b:47:62: 57:55:71:67:32:e9:87:c7:a1:99:ce:f5:05:0c:c2:d4:3b:99: be:08:fa:28:7e:1c:d8:3e:95:ad:cd:ef:c0:fe:ba:99:17:f5: f6:4e:f4:13:56:55:da:b3:6a:47:0e:21:e2:0c:67:31:4a:eb: 54:07:7e:ec:14:4b:57:0b:92:d3:6c:e6:a8:d9:29:c4:65:69: 4b:a7:02:86:ba:da:0f:7d:f8:6c:88:8d:85:a2:99:61:ce:27: c6:e7:40:31:57:03:cb:a7:27:7f:c4:fe:b3:35:94:70:d5:9f: db:8c:99:64:e2:21:26:c9:df:da:f8:da:2e:b4:41:80:fa:85: cf:79:ce:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGz/rYQW81ontAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk NGEzY2FhZDctZjMyNi00MWRlLWI1OTYtZmEzNzIxNjU1MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/0HTPXI5ixajRyIkvWvZWUtuGL6Fl5rUP5U 8j/X5X+K4GWkOQxeiDb6giiKxqUjOsAyP/4tnYdpZsmqw+UuU4M3yoNirG+b+xLM IFrMrAT/ICbZcYIMQKAxqHcmNBJwIipy4Z0/llIWkt8KVxdqxwq8x+/i0pdRJZc2 zmz67BZNR+x+t7jDf5Bv0tR0WBdDaBU1A1NuGJeneS9eP148opnQDacDRmI3BFD4 KlOkhyRdaNxGY7xQNYKlM45RNML6NXj7C4UWRmTlm04luLIAvnoAUHqvuAzM+TJ1 FF5G9mfhnA0KhQGO0DZnS9hByTVvXXQqMDIsUSbQyOeLR4ozUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWyCHYqZOSinVGkss3NEMDeWFutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdkM2ViMDItMTlkZC0z OGU5LWEyMjQtMTgwZGI1M2JlM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXim7oRE2FPVzXi+xf4Lm3Mi/hK7nB88OR9rWmzxJse1sfaKOOMgWQi 1CQk7w5eFPTKhhr+I43f0haQmIyI5156CIWFc/iL8IZI2dw9GEivNYL04D2AuzW9 gkpm1sn5hHuDJHXpvLHKu7WgNgvEc0/4My2YyC5IjOa06ptHYldVcWcy6YfHoZnO 9QUMwtQ7mb4I+ih+HNg+la3N78D+upkX9fZO9BNWVdqzakcOIeIMZzFK61QHfuwU S1cLktNs5qjZKcRlaUunAoa62g99+GyIjYWimWHOJ8bnQDFXA8unJ3/E/rM1lHDV n9uMmWTiISbJ39r42i60QYD6hc95zkU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:13 2025 by rpki-client